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TITLE OF THE INVENTION 
METHOD AND APPARATUS FOR CONTENTS INFORMATION 
BACKGROUND OF THE INVENTION 
Field of the Invention 
5 This invention relates to a method of transmitting contents 

information. Also, this invention relates to a method of recording 
contents information. In addition, this invention relates to an 
apparatus for transmitting contents information. Furthermore, this 
invention relates to an apparatus for recording contents information. 
1 0 Also, this invention relates to a transmission medium. In addition, 
this invention relates to a recording medium. Furthermore, this 
invention relates to a method of decrypting contents information. 
Also, this invention relates to an apparatus for decrypting contents 
information. 

1 5 Description of the Related Art 

Japanese published unexamined patent application 10- 
269289 discloses a system for managing the distribution of digital 
contents. In the system of Japanese application 10-269289, a 
distributor side encrypts and compresses digital contents into 

2 0 processing- resultant digital contents. The distributor side 

transmits the processing-resultant digital contents, an encryption- 
resultant contents key, and encryption-resultant accounting 
information to a communication opposite party. The distributor 
side implements a process of receiving a charge on the basis of 
2 5 contents use information transmitted from the communication 

opposite party. Then, the distributor side implements a process of 
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dividing the received charge among interested persons including a 
copyright holder of the digital contents. On the other hand, a user 
side (a digital contents player) decrypts and expands the 
processing-resultant digital contents in response to the contents 
5 key, thereby reproducing the original digital contents. The user 
side subjects the accounting information to a reducing process 
responsive to the use of the digital contents. The user side 
transmits the reduced accounting information and the contents use 
information to the distributor side. 
1 0 Japanese published unexamined patent application 10- 

283268 discloses a system in which a recording medium stores 
encryption-resultant main information, and also encryption- 
resultant information representing a key for decrypting the 
encryption-resultant main information. Non-encrypted information 

1 5 representing conditions of decrypting the encryption-resultant 

main information is added to the encryption-resultant key 
information. In more detail, the encryption-resultant key 
information has non-encrypted control information which contains 
device information and region information. The control information 
20 is designed to prevent the encryption-resultant main information 
from being copied onto a magnetic recording medium or an optical 
disc in a user side for illegal use thereof. 

The system of Japanese application 10-283268 has a problem 
as follows. The non-encrypted control information in the 

2 5 encryption-resultant key information can easily be altered by a third 

person. The alteration of the non-encrypted control information 



-3- 



enables the third person to illegally copy the encryption-resultant 
main information. 

SUMMARY OF THE INVENTION 
It is a first object of this invention to provide an improved 
5 method of transmitting contents information. 

It is a second object of this invention to provide an improved 
method of recording contents information. 

It is a third object of this invention to provide an improved 
apparatus for transmitting contents information. 
10 It is a fourth object of this invention to provide an improved 

apparatus for recording contents information. 

It is a fifth object of this invention to provide an improved 
transmission medium. 

It is a sixth object of this invention to provide an improved 

1 5 recording medium. 

It is a seventh object of this invention to provide an improved 
method of decrypting contents information. 

It is an eighth object of this invention to provide an improved 
apparatus for decrypting contents information. 

2 0 A first aspect of this invention provides a method of 

transmitting contents information. The method comprises the 
steps of generating a signal representative of a key from 
authenticator- value information and key base information, the 
authenticator-value information representing a specified 
2 5 authenticator value, the key base information containing 

identification information which is set to reproduce the specified 
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authenticator value according to a predetermined degeneration 
function; encrypting contents information into encryption-resultant 
contents information in response to the key signal; and transmitting 
the key base information and the encryption-resultant contents 
5 information. 

A second aspect of this invention provides a method of 
recording contents information. The method comprises the steps 
of generating a signal representative of a key from authenticator- 
value information and key base information, the authenticator-value 
1 0 information representing a specified authenticator value, the key 
base information containing identification information which is set 
to reproduce the specified authenticator value according to a 
predetermined degeneration function; encrypting contents 
information into encryption-resultant contents information in 

1 5 response to the key signal; and recording the key base information 

and the encryption-resultant contents information. 

A third aspect of this invention provides a method of 
transmitting contents information. The method comprises the 
steps of generating a signal representative of a key from 

2 0 authenticator-value information and key base information, the 

authenticator-value information representing a specified 
authenticator value, the key base information containing 
identification information which is set to reproduce the specified 
authenticator value according to a predetermined degeneration 
2 5 function; encrypting at least the identification information in the 
key base information to convert the key base information into 
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encryption-resultant key base information; encrypting contents 
information into encryption-resultant contents information in 
response to the key signal; and transmitting the encryption- 
resultant key base information and the encryption-resultant 
5 contents information. 

A fourth aspect of this invention provides a method of 
recording contents information. The method comprises the steps 
of generating a signal representative of a key from authenticator- 
value information and key base information, the authenticator-value 
1 0 information representing a specified authenticator value, the key 
base information containing identification information which is set 
to reproduce the specified authenticator value according to a 
predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 

1 5 key base information into encryption-resultant key base information; 

encrypting contents information into encryption-resultant contents 
information in response to the key signal; and recording the 
encryption-resultant key base information and the encryption- 
resultant contents information. 

2 0 A fifth aspect of this invention provides an apparatus for 

transmitting contents information. The apparatus comprises means 
for generating a signal representative of a key from authenticator- 
value information and key base information, the authenticator-value 
information representing a specified authenticator value, the key 
2 5 base information containing identification information which is set 
to reproduce the specified authenticator value according to a 
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predetermined degeneration function; means for encrypting at least 
the identification information in the key base information to convert 
the key base information into encryption-resultant key base 
information; means for encrypting contents information into 
5 encryption-resultant contents information in response to the key 
signal; and means for transmitting the encryption-resultant key base 
information and the encryption-resultant contents information. 

A sixth aspect of this invention provides an apparatus for 
recording contents information. The apparatus comprises means 
1 0 for generating a signal representative of a key from authenticator- 
value information and key base information, the authenticator-value 
information representing a specified authenticator value, the key 
base information containing identification information which is set 
to reproduce the specified authenticator value according to a 

1 5 predetermined degeneration function; means for encrypting at least 

the identification information in the key base information to convert 
the key base information into encryption-resultant key base 
information; means for encrypting contents information into 
encryption-resultant contents information in response to the key 

2 0 signal; and means for recording the encryption-resultant key base 

information and the encryption-resultant contents information. 

A seventh aspect of this invention provides a transmission 
medium for transmitting encryption-resultant key base information 
and encryption-resultant contents information, wherein the 
2 5 encryption-resultant key base information and the encryption- 
resultant contents information are generated by the steps of 
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generating a signal representative of a key from authenticator-value 
information and key base information, the authenticator-value 
information representing a specified authenticator value, the key 
base information containing identification information which is set 
5 to reproduce the specified authenticator value according to a 
predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 
key base information into encryption-resultant key base information; 
and encrypting contents information into encryption-resultant 
1 0 contents information in response to the key signal. 

An eighth aspect of this invention provides a recording 
medium loaded with encryption- resultant key base information and 
encryption-resultant contents information, wherein the encryption- 
resultant key base information and the encryption-resultant 

1 5 contents information are generated by the steps of generating a 

signal representative of a key from authenticator-value information 
and key base information, the authenticator-value information 
representing a specified authenticator value, the key base 
information containing identification information which is set to 

2 0 reproduce the specified authenticator value according to a 

predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 
key base information into encryption-resultant key base information; 
and encrypting contents information into encryption-resultant 
2 5 contents information in response to the key signal. 

A ninth aspect of this invention is based on the third aspect 
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thereof, and provides a method wherein the identification 
information in the key base information contains at least one of 1) 
information about a region or regions corresponding to one or more 
countries, one or more zones, or one or more spaces, 2) information 
5 about identification of an individual, 3) information about 

identification of a group of persons, 4) information about a rating, 5) 
information about identification of an apparatus maker or a device 
maker, 6) information about identification of a contents provider, 7) 
information about time, 8) information about contents authors, 9) 
1 0 information about identification of a reproducing apparatus or a 
reproducing device, 10) information about identification of a 
connection apparatus or a connection device, 11) information about 
identification of a medium on which contents information is 
recorded, 12) information about identification of contents 

1 5 information, and 13) information about accounting. 

A tenth aspect of this invention provides a method of 
transmitting contents information. The method comprises the 
steps of generating a signal representative of a key from key base 
information containing identification information which is set to 

2 0 reproduce a specified authenticator value according to a 

predetermined degeneration function; encrypting contents 
information into encryption-resultant contents information in 
response to the key signal; and transmitting the key base 
information and the encryption-resultant contents information. 
2 5 An eleventh aspect of this invention provides a method of 

recording contents information. The method comprises the steps 
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of generating a signal representative of a key from key base 
information containing identification information which is set to 
reproduce a specified authenticator value according to a 
predetermined degeneration function; encrypting contents 
5 information into encryption-resultant contents information in 

response to the key signal; and recording the key base information 
and the encryption-resultant contents information. 

A twelfth aspect of this invention provides a method of 
transmitting contents information. The method comprises the 
1 0 steps of generating a signal representative of a key from key base 
information containing identification information which is set to 
reproduce a specified authenticator value according to a 
predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 

1 5 key base information into encryption-resultant key base information; 

encrypting contents information into encryption-resultant contents 
information in response to the key signal; and transmitting the 
encryption-resultant key base information and the encryption- 
resultant contents information. 

2 0 A thirteenth aspect of this invention provides a method of 

recording contents information. The method comprises the steps 
of generating a signal representative of a key from key base 
information containing identification information which is set to 
reproduce a specified authenticator value according to a 
2 5 predetermined degeneration function; encrypting at least the 

identification information in the key base information to convert the 
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key base information into encryption-resultant key base information; 
encrypting contents information into encryption-resultant contents 
information in response to the key signal; and recording the 
encryption-resultant key base information and the encryption- 
5 resultant contents information. 

A fourteenth aspect of this invention provides an apparatus for 
transmitting contents information. The apparatus comprises means 
for generating a signal representative of a key from key base 
information containing identification information which is set to 
1 0 reproduce a specified authenticator value according to a 

predetermined degeneration function; means for encrypting at least 
the identification information in the key base information to convert 
the key base information into encryption-resultant key base 
information; means for encrypting contents information into 

1 5 encryption-resultant contents information in response to the key 

signal; and means for transmitting the encryption-resultant key base 
information and the encryption-resultant contents information. 

A fifteenth aspect of this invention provides an apparatus for 
recording contents information. The apparatus comprises means 

2 0 for generating a signal representative of a key from key base 

information containing identification information which is set to 
reproduce a specified authenticator value according to a 
predetermined degeneration function; means for encrypting at least 
the identification information in the key base information to convert 
2 5 the key base information into encryption-resultant key base 
information; means for encrypting contents information into 
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encryption-resultant contents information in response to the key 
signal; and means for recording the encryption-resultant key base 
information and the encryption-resultant contents information. 

A sixteenth aspect of this invention provides a transmission 
5 medium for transmitting encryption-resultant key base information 
and encryption-resultant contents information, wherein the 
encryption-resultant key base information and the encryption- 
resultant contents information are generated by the steps of 
generating a signal representative of a key from key base 
1 0 information containing identification information which is set to 
reproduce a specified authenticator value according to a 
predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 
key base information into encryption-resultant key base information; 

1 5 and encrypting contents information into encryption-resultant 

contents information in response to the key signal. 

A seventeenth aspect of this invention provides a recording 
medium loaded with encryption-resultant key base information and 
encryption-resultant contents information, wherein the encryption- 

2 0 resultant key base information and the encryption-resultant 

contents information are generated by the steps of generating a 
signal representative of a key from key base information containing 
identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
2 5 function; encrypting at least the identification information in the 
key base information to convert the key base information into 
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encryption-resultant key base information; and encrypting contents 
information into encryption-resultant contents information in 
response to the key signal. 

An eighteenth aspect of this invention is based on the twelfth 
5 aspect thereof, and provides a method wherein the identification 
information in the key base information contains at least one of 1) 
information about a region or regions corresponding to one or more 
countries, one or more zones, or one or more spaces, 2) information 
about identification of an individual, 3) information about 
1 0 identification of a group of persons, 4) information about a rating, 5) 
information about identification of an apparatus maker or a device 
maker, 6) information about identification of a contents provider, 7) 
information about time, 8) information about contents authors, 9) 
information about identification of a reproducing apparatus or a 

1 5 reproducing device, 10) information about identification of a 

connection apparatus or a connection device, 1 1) information about 
identification of a medium on which contents information is 
recorded, 12) information about identification of contents 
information, and 13) information about accounting. 

2 0 A nineteenth aspect of this invention provides a method of 

decrypting encryption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
signal representative of a key from authenticator-value information 
and key base information, the authenticator-value information 
2 5 representing a specified authenticator value, the key base 

information containing identification information which is set to 
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reproduce the specified authenticator value according to a 
predetermined degeneration function; and encrypting contents 
information into encryption-resultant contents information in 
response to the key signal. The method comprises the steps of 
5 reproducing the authenticator-value information representative of 
the specified authenticator value from the identification information 
in the key base information according to the predetermined 
degeneration function; reproducing the key signal from the 
reproduced authenticator-value information and the key base 

1 0 information; and decrypting the encryption-resultant contents 

information into the original contents information in response to 
the reproduced key signal. 

A twentieth aspect of this invention provides a method of 
decrypting encryption-resultant contents information generated by 
15 an encrypting side which implements the steps of generating a 

signal representative of a key from authenticator-value information 
and key base information, the authenticator-value information 
representing a specified authenticator value, the key base 
information containing identification information which is set to 

2 0 reproduce the specified authenticator value according to a 

predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 
key base information into encryption-resultant key base information; 
and encrypting contents information into encryption-resultant 
2 5 contents information in response to the key signal. The method 

comprises the steps of decrypting the encryption-resultant key base 



-14- 



information into the original key base information; reproducing the 
authenticator-value information representative of the specified 
authenticator value from the identification information in the 
original key base information according to the predetermined 
5 degeneration function; reproducing the key signal from the 

reproduced authenticator-value information and the original key 
base information; and decrypting the encryption-resultant contents 
information into the original contents information in response to 
the reproduced key signal. 
10 A twenty-first aspect of this invention provides an apparatus 

for decrypting encryption-resultant contents information generated 
by an encrypting side which implements the steps of generating a 
signal representative of a key from authenticator-value information 
and key base information, the authenticator-value information 

1 5 representing a specified authenticator value, the key base 

information containing identification information which is set to 
reproduce the specified authenticator value according to a 
predetermined degeneration function; encrypting at least the 
identification information in the key base information to convert the 

2 0 key base information into encryption-resultant key base information; 

and encrypting contents information into encryption-resultant 
contents information in response to the key signal. The apparatus 
comprises means for decrypting the encryption-resultant key base 
information into the original key base information; means for 
2 5 reproducing the authenticator-value information representative of 
the specified authenticator value from the identification information 
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in the original key base information according to the predetermined 
degeneration function; means for reproducing the key signal from 
the reproduced authenticator-value information and the original key 
base information; and means for decrypting the encryption-resultant 
5 contents information into the original contents information in 
response to the reproduced key signal. 

A twenty- second aspect of this invention provides a method of 
decrypting encryption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
1 0 signal representative of a key from key base information containing 
identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
function; and encrypting contents information into encryption- 
resultant contents information in response to the key signal. The 

1 5 method comprises the steps of reproducing the authenticator-value 

information representative of the specified authenticator value from 
the identification information in the key base information according 
to the predetermined degeneration function; reproducing the key 
signal from the key base information; deciding whether or not the 

2 0 reproduced authenticator-value information is correct; decrypting 

the encryption-resultant contents information in response to the 
reproduced key signal when it is decided that the reproduced 
authenticator-value information is correct; and altering the 
reproduced key signal into a wrong key signal and decrypting the 
2 5 encryption-resultant contents information in response to the wrong 
key signal when it is decided that the reproduced authenticator- 
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value information is not correct. 

A twenty-third aspect of this invention provides a method of 
decrypting encryption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
5 signal representative of a key from key base information containing 
identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
function; encrypting at least the identification information in the 
key base information to convert the key base information into 
1 0 encryption-resultant key base information; and encrypting contents 
information into encryption-resultant contents information in 
response to the key signal. The method comprises the steps of 
decrypting the encryption-resultant key base information into the 
original key base information; reproducing the authenticator-value 

1 5 information representative of the specified authenticator value from 

the identification information in the original key base information 
according to the predetermined degeneration function; reproducing 
the key signal from the original key base information; deciding 
whether or not the reproduced authenticator-value information is 

2 0 correct; decrypting the encryption-resultant contents information 

in response to the reproduced key signal when it is decided that 
the reproduced authenticator-value information is correct; and 
altering the reproduced key signal into a wrong key signal and 
decrypting the encryption-resultant contents information in 
2 5 response to the wrong key signal when it is decided that the 
reproduced authenticator-value information is not correct. 
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A twenty-fourth aspect of this invention provides an apparatus 
for decrypting encryption-resultant contents information generated 
by an encrypting side which implements the steps of generating a 
signal representative of a key from key base information containing 
5 identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
function; encrypting at least the identification information in the 
key base information to convert the key base information into 
encryption-resultant key base information; and encrypting contents 
1 0 information into encryption-resultant contents information in 
response to the key signal. The apparatus comprises means for 
decrypting the encryption-resultant key base information into the 
original key base information; means for reproducing the 
authenticator-value information representative of the specified 

1 5 authenticator value from the identification information in the 

original key base information according to the predetermined 
degeneration function; means for reproducing the key signal from 
the original key base information; means for deciding whether or 
not the reproduced authenticator-value information is correct; 

2 0 means for decrypting the encryption-resultant contents information 

in response to the reproduced key signal when it is decided that 
the reproduced authenticator-value information is correct; and 
means for altering the reproduced key signal into a wrong key signal 
and decrypting the encryption-resultant contents information in 
2 5 response to the wrong key signal when it is decided that the 
reproduced authenticator-value information is not correct. 
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A twenty-fifth aspect of this invention provides a method of 
decrypting encryption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
signal representative of a key from key base information containing 
5 identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
function; and encrypting contents information into encryption- 
resultant contents information in response to the key signal. The 
method comprises the steps of reproducing the authenticator- value 
1 0 information representative of the specified authenticator value from 
the identification information in the key base information according 
to the predetermined degeneration function; reproducing the key 
signal from the key base information; deciding whether or not the 
reproduced authenticator-value information is correct; decrypting 

1 5 the encryption-resultant contents information in response to the 

reproduced key signal when it is decided that the reproduced 
authenticator-value information is correct; and failing to decrypt the 
encryption-resultant contents information in response to the 
reproduced key signal when it is decided that the reproduced 

2 0 authenticator-value information is not correct. 

A twenty-sixth aspect of this invention provides a method of 
decrypting encryption-resultant contents information generated by 
an encrypting side which implements the steps of generating a 
signal representative of a key from key base information containing 
2 5 identification information which is set to reproduce a specified 
authenticator value according to a predetermined degeneration 
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function; encrypting at least the identification information in the 
key base information to convert the key base information into 
encryption-resultant key base information; and encrypting contents 
information into encryption-resultant contents information in 
5 response to the key signal. The method comprises the steps of 
decrypting the encryption-resultant key base information into the 
original key base information; reproducing the authenticator-value 
information representative of the specified authenticator value from 
the identification information in the original key base information 
1 0 according to the predetermined degeneration function; reproducing 
the key signal from the original key base information; deciding 
whether or not the reproduced authenticator-value information is 
correct; decrypting the encryption-resultant contents information 
in response to the reproduced key signal when it is decided that 

1 5 the reproduced authenticator-value information is correct; and 

failing to decrypt the encryption-resultant contents information in 
response to the reproduced key signal when it is decided that the 
reproduced authenticator-value information is not correct. 
A twenty-seventh aspect of this invention provides an 

2 0 apparatus for decrypting encryption-resultant contents information 

generated by an encrypting side which implements the steps of 
generating a signal representative of a key from key base 
information containing identification information which is set to 
reproduce a specified authenticator value according to a 
2 5 predetermined degeneration function; encrypting at least the 

identification information in the key base information to convert the 
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key base information into encryption-resultant key base information; 
and encrypting contents information into encryption-resultant 
contents information in response to the key signal. The apparatus 
comprises means for decrypting the encryption-resultant key base 
5 information into the original key base information; means for 

reproducing the authenticator-value information representative of 
the specified authenticator value from the identification information 
in the original key base information according to the predetermined 
degeneration function; means for reproducing the key signal from 
1 0 the original key base information; means for deciding whether or 
not the reproduced authenticator-value information is correct; 
means for decrypting the encryption-resultant contents information 
in response to the reproduced key signal when it is decided that 
the reproduced authenticator-value information is correct; and 

1 5 means for failing to decrypt the encryption-resultant contents 

information in response to the reproduced key signal when it is 
decided that the reproduced authenticator-value information is not 
correct. 

A twenty-eighth aspect of this invention is based on the 

2 0 nineteenth aspect thereof, and provides a method wherein the 

identification information in the key base information contains at 
least one of 1) information about a region or regions corresponding 
to one or more countries, one or more zones, or one or more 
spaces, 2) information about identification of an individual, 3) 
2 5 information about identification of a group of persons, 4) 

information about a rating, 5) information about identification of an 
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apparatus maker or a device maker, 6) information about 
identification of a contents provider, 7) information about time, 8) 
information about contents authors, 9) information about 
identification of a reproducing apparatus or a reproducing device, 
5 10) information about identification of a connection apparatus or a 
connection device, 11) information about identification of a medium 
on which contents information is recorded, 12) information about 
identification of contents information, and 13) information about 
accounting. 

1 0 BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram of a system for contents information 
according to a first embodiment of this invention. 

Fig. 2 is a diagram of the structure of key base information. 
Fig. 3 is a diagram of a key generator in a primary section of 

1 5 the system in Fig. 1. 

Fig. 4 is a diagram of a calculator in a secondary section of the 
system in Fig. 1 . 

Fig. 5 is a diagram of a key generator in the secondary section 
of the system in Fig. 1. 

2 0 Fig. 6 is a block diagram of a system for contents information 

according to a second embodiment of this invention. 

Fig. 7 is a block diagram of a system for contents information 
according to a third embodiment of this invention. 

Fig. 8 is a block diagram of a system for contents information 
25 according to a fourth embodiment of this invention. 

Fig. 9 is a block diagram of a system for contents information 
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according to a fifth embodiment of this invention. 

Fig. 10 is a block diagram of a system for contents information 
according to a sixth embodiment of this invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
5 First Embodiment 

Fig. 1 shows a system for contents information according to a 
first embodiment of this invention. The system of Fig. 1 includes a 
primary section P, a secondary section Q, and an intermediate 
section R. The primary section P and the secondary section Q are 
1 0 connected to each other via the intermediate section R. 

The primary section P includes an information recording 
apparatus or an information transmitting apparatus. The secondary 
section Q includes an information reproducing apparatus or an 
information receiving apparatus. An example of the information 

1 5 reproducing apparatus is an information player. The intermediate 

section R includes a recording medium or a transmission medium. 
Examples of the recording medium are a magnetic recording 
medium, an optical recording medium, and a semiconductor 
memory. Examples of the transmission medium are an optical fiber 

2 0 cable, electric wires, and a radio transmission line. The 

transmission medium is also referred to as a transmission line. 

The primary section P includes a calculator or a key generator 
1, a key generator 2, a signal generator 3, and an encryptor 4. The 
calculator 1 receives information being a base of a contents key. 
2 5 The key base information is fed from a suitable device (not shown). 
The calculator 1 generates a signal (information) representative of a 
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primitive key from the key base information according to a 
predetermined one-way hash function. The calculator 1 outputs the 
primitive-key signal (the primitive-key information) to the key 
generator 2. The one-way hash function means a function "h" 
5 designed to meet conditions as follows. When a certain value "x" is 
given in a domain of definition, it is difficult to calculate a value "y" 
which satisfies the relation as "h(x) = h(y)". 

Fig. 2 shows an example of the structure of the key base 
information. The key base information in Fig. 2 has 56 bits divided 
1 0 into a first 16-bit block 21, a second 16-bit block 22, a 4-bit block 
23, and a 20-bit block 24 which are sequentially arranged in that 
order. The first 16-bit block 21 represents identification (ID) 
information of a contents provider. The second 16-bit block 22 
represents ID information of a contents author. The 4-bit block 23 

1 5 represents ID information of a maker. The 20-bit block 24 

represents information peculiar to the system. 

The signal generator 3 in Fig. 1 outputs information 
representative of a predetermined or specified authenticator value 
to the key generator 2. The signal generator 3 includes, for 

2 0 example, a memory loaded with the authenticator-value information 

or a CPU programmed to generate the authenticator-value 
information. 

The 16-bit contents provider ID information, the 16-bit 
contents author ID information, and the 4-bit maker ID information 
2 5 in the key base information are set so that the predetermined 
authenticator value (the specified authenticator value) can be 
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generated or reproduced by the secondary section Q according to a 
predetermined degeneration function. Specifically, the secondary 
section Q uses the 16-bit contents provider ID information, the 16- 
bit contents author ID information, and the 4-bit maker ID 
5 information in the transmitted and received key base information as 
parameters of the predetermined degeneration function for 
recovering the predetermined authenticator value. Correct values of 
the 16-bit contents provider ID information, the 16-bit contents 
author ID information, and the 4-bit maker ID information are open 
1 0 only to a legitimate user. The correct contents provider ID 

information, the correct contents author ID information, and the 
correct maker ID information are referred to as authorized or 
permitted ID information. 

The key generator 2 produces a signal (information) 

1 5 representative of the contents key in response to the primitive-key 

information and the authenticator-value information according to a 
predetermined function. The key generator 2 outputs the contents- 
key signal (the contents- key information) to the encryptor 4. 

Fig. 3 shows an example of the key generator 2. The key 

2 0 generator 2 in Fig. 3 executes Exclusive-OR operation between the 

primitive -key information and the authenticator-value information. 
The key generator 2 outputs a signal representative of the result of 
Exclusive-OR operation as the contents-key information. In this 
case, Exclusive-OR operation corresponds to the predetermined 
2 5 function used by the key generator 2. 

The encryptor 4 receives contents information from a suitable 
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device (not shown). The device 4 encrypts the contents 
information into encryption-resultant contents information in 
response to the contents-key signal. The encryptor 4 outputs the 
encryption-resultant contents information to the intermediate 
5 section R. 

Specifically, the primary section P records the encryption- 
resultant contents information on the recording medium of the 
intermediate section R, or transmits the encryption-resultant 
contents information to the transmission line of the intermediate 

1 0 section R. 

The encryptor 4 may additionally include a compressor. In 
this case, the compressor compresses the contents information, 
and then the encryptor 4 encrypts the compression-resultant 
contents information. The compression of the contents information 
15 is executed in a predetermined compressing method such as an 
MPEG (Moving Picture Experts Group) compressing method. It 
should be noted that compression-resultant contents information 
may be fed to the encryptor 4 from an external device (not shown). 
In this case, the compressor is omitted from the encryptor 4. 

2 0 The encryption by the encryptor 4 may be based on a known 

encryption algorithm such as DES (Data Encryption Standard). 
According to DES, the contents information is encrypted and 
decrypted 64 bits by 64 bits in response to the contents-key signal. 
In this case, the contents-key signal corresponds to a 56-bit signal 
2 5 representing a common key. The encryption by the encryptor 4 
includes a step of dividing every 64-bit block of the contents 
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information (or the compression-resultant contents information) 
into a pair of 32-bit sub blocks. The encryption includes additional 
steps for signal processing on a sub-block by sub-block basis. The 
additional steps contain a step of transposing data, a step of 
5 executing permutation of data, a step of processing data according 
to a nonlinear function, and a step of executing Exclusive-OR 
operation between data. 

The primary section P outputs the key base information to the 
intermediate section R. Specifically, the primary section P records 

1 0 the key base information on the recording medium of the 

intermediate section R, or transmits the key base information to the 
transmission line of the intermediate section R. 

The primary section P may further include a second 
encryptor. In this case, the second encryptor encrypts at least part 
15 of the key base information to generate encryption-resultant key 
base information. For example, the second encryptor encrypts at 
least the 16-bit contents provider ID information, the 16-bit 
contents author ID information, and the 4-bit maker ID information 
in the key base information. The second encryptor outputs the 

2 0 encryption-resultant key base information to the intermediate 

section R. Specifically, in this case, the primary section P records 
the encryption-resultant key base information on the recording 
medium of the intermediate section R, or transmits the encryption- 
resultant key base information to the transmission line of the 
2 5 intermediate section R. 

The encryption-resultant contents information and the key 
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base information (or the encryption-resultant key base information) 
are transmitted from the primary section P to the secondary section 
Q through the intermediate section R. 

The secondary section Q includes a calculator or a key 
5 generator 5, a calculator 6, a key generator 7, and a decrypting 

device 8. The calculator 5 is similar in design and operation to the 
calculator 1 of the primary section P. The calculator 5 receives the 
key base information from the intermediate section R. The 
calculator 5 generates a signal (information) representative of a 
1 0 primitive key from the key base information according to a 

predetermined one-way hash function equivalent to that used by the 
calculator 1 in the primary section P. The calculator 5 outputs the 
primitive-key signal (the primitive-key information) to the key 
generator 7. 

1 5 The calculator 6 receives the key base information from the 

intermediate section R. The calculator 6 generates information 
representative of a predetermined or specified authenticator value 
from the 16-bit contents provider ID information, the 16-bit 
contents author ID information, and the 4-bit maker ID information 

2 0 in the key base information according to a predetermined 

degeneration function. The authenticator value generated by the 
calculator 6 is equal to that used in the primary section P. Thus, the 
calculator 6 reproduces the authenticator value used in the primary 
section P. Preferably, the degeneration function used by the 
2 5 calculator 6 differs from the one-way hash function used by the 
calculator 5. The degeneration function used by the calculator 6 
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may be the same as the one-way hash function used by the calculator 
5. Correct information of the degeneration function used by the 
calculator 6 is open only to a legitimate user. The calculator 6 
outputs the authenticator-value information to the key generator 7. 
5 Fig. 4 shows an example of the calculator 6. The calculator 6 

in Fig. 4 extracts the 16-bit contents provider ID information, the 
16-bit contents author ID information, and the 4-bit maker ID 
information from the key base information. The calculator 6 
executes Exclusive-OR operation among the 16-bit contents 
1 0 provider ID information, the 16-bit contents author ID information, 
and the 4-bit maker ID information. The calculator 6 outputs 
information representative of the result of Exclusive-OR operation as 
the authenticator-value information. The authenticator-value 
information is also referred to as the degeneration information. In 

1 5 this case, Exclusive-OR operation corresponds to the degeneration 

function, and the 16-bit contents provider ID information, the 16- 
bit contents author ID information, and the 4-bit maker ID 
information are used as parameters of the degeneration function. 
The second section Q may further include a second 

2 0 decrypting device. In this case, the second decrypting device 

receives the encryption-resultant key base information from the 
intermediate section R. The second decrypting device decrypts the 
encryption-resultant key base information into the original key base 
information. The second decrypting device outputs the original key 
2 5 base information to the calculators 5 and 6. 

The key generator 7 is similar in design and operation to the 
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key generator 2 of the primary section P. The key generator 7 
produces a signal (information) representative of a contents key in 
response to the primitive-key information and the authenticator- 
value information (the degeneration information) according to a 
5 predetermined function equivalent to that used by the key generator 
2 in the primary section P. Thus, the key generator 7 reproduces 
the contents-key signal used in the primary section P. The key 
generator 7 outputs the contents-key signal (the contents-key 
information) to the decrypting device 8. 
1 0 Fig. 5 shows an example of the key generator 7. The key 

generator 7 in Fig. 5 executes Exclusive-OR operation between the 
primitive-key information and the authenticator-value information 
(the degeneration information). The key generator 7 outputs a 
signal representative of the result of Exclusive-OR operation as the 

1 5 contents-key information. In this case, Exclusive-OR operation 

corresponds to the predetermined function used by the key 
generator 7. 

The decrypting device 8 receives the encryption-resultant 
contents information from the intermediate section R. Operation of 

2 0 the decrypting device 8 is inverse with respect to that of the 

encryptor 4 in the primary section P. The decrypting device 8 
decrypts the encryption-resultant contents information into the 
original contents information in response to the contents-key signal. 
Thus, the decrypting device 8 reproduces the original contents 
2 5 information. The decrypting device 8 outputs the reproduced 
contents information. 
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In the system of Fig. 1, the 16-bit contents provider ID 
information, the 16-bit contents author ID information, and the 4- 
bit maker ID information in the key base information are set so that 
the predetermined authenticator value (the specified authenticator 
5 value) can be generated according to the predetermined 

degeneration function. The generated authenticator value is used to 
reproduce the contents key for decrypting the encryption-resultant 
contents information. Correct values of the 16-bit contents provider 
ID information, the 16-bit contents author ID information, and the 
1 0 4-bit maker ID information are open only to a legitimate user. It is 
difficult to generate the predetermined authenticator value by using 
wrong values of the 16-bit contents provider ID information, the 16- 
bit contents author ID information, and the 4-bit maker ID 
information. Therefore, it is difficult to decrypt the encryption- 

1 5 resultant contents information by using wrong values of the 16-bit 

contents provider ID information, the 16-bit contents author ID 
information, and the 4-bit maker ID information. Correct 
information of the predetermined degeneration function is open 
only to a legitimate user. It is difficult to generate the 

2 0 predetermined authentication value by using wrong information of 

the predetermined degeneration function. Therefore, it is difficult 
to decrypt the encryption-resultant contents information by using 
wrong information of the predetermined degeneration function. As 
understood from the above description, the encryption-resultant 
2 5 contents information is decrypted only when correct values of the 
16-bit contents provider ID information, the 16-bit contents author 
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ID information, and the 4-bit maker ID information, and also correct 
information of the predetermined degeneration function are 
available. Accordingly, the contents information can be surely 
prevented from being illegally reproduced or copied. 
5 The 16-bit contents provider ID information, the 16-bit 

contents author ID information, and the 4-bit maker ID information 
in the key base information may be replaced by at least one of 1) 
information about a region or regions corresponding to one or more 
countries, one or more zones, or one or more spaces, 2) information 
1 0 about identification of an individual, 3) information about 

identification of a group of persons, 4) information about a rating, 5) 
information about identification of an apparatus maker or a device 
maker, 6) information about identification of a contents provider, 7) 
information about time, 8) information about contents authors, 9) 

1 5 information about identification of a reproducing apparatus or a 

reproducing device, 10) information about identification of a 
connection apparatus or a connection device, 1 1) information about 
identification of a medium on which contents information is 
recorded, 12) information about identification of contents 

2 0 information, and 13) information about accounting. 

Second Embodiment 
Fig. 6 shows a system for contents information according to a 
second embodiment of this invention. The system of Fig. 6 is 
similar to the system of Fig. 1 except for design changes mentioned 
2 5 hereinafter. The system of Fig. 6 includes a primary section PA and 
a secondary section QA instead of the primary section P and the 
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secondaiy section Q (see Fig. 1) respectively. 

The primary section PA is similar to the primary section P 
except that the key generator 2 and the signal generator 3 (see Fig. 
1) are omitted therefrom. In the primary section PA, the calculator 
5 (the key generator) 1 and the encryptor 4 are directly connected to 
each other. 

The secondary section QA is similar to the secondary section 
Q except that a key processor 1 1 replaces the key generator 7 (see 
Fig. 1). 

10 In the primary section PA, the calculator 1 generates a signal 

(information) representative of a primitive key from the key base 
information according to a predetermined one-way hash function. 
The calculator 1 outputs the primitive-key signal (the primitive-key 
information) to the encryptor 4. 

15 As shown in Fig. 2, an example of the key base information has 

the 16-bit contents provider ID information, the 16-bit contents 
author ID information, the 4-bit maker ID information, and the 20- 
bit system-peculiar information. 

The 16-bit contents provider ID information, the 16-bit 

2 0 contents author ID information, and the 4-bit maker ID information 
in the key base information are set so that a predetermined or 
specified authenticator value can be generated by the secondary 
section QA according to a predetermined degeneration function. 
Specifically, the secondary section QA uses the 16-bit contents 

2 5 provider ID information, the 16-bit contents author ID information, 
and the 4-bit maker ID information in the transmitted and received 
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key base information as parameters of the predetermined 
degeneration function for recovering the predetermined 
authenticator value. Correct values of the 16-bit contents provider 
ID information, the 16-bit contents author ID information, and the 
5 4-bit maker ID information are open only to a legitimate user. 

The encryptor 4 receives contents information from a suitable 
device (not shown). The encryptor 4 uses the primitive-key signal 
as a signal (information) representative of a contents key. The 
device 4 encrypts the contents information into encryption- 
1 0 resultant contents information in response to the contents-key 

signal. The encryption by the encryptor 4 may be based on a known 
encryption algorithm such as DES. The encryptor 4 outputs the 
encryption-resultant contents information to the intermediate 
section R, 

1 5 Specifically, the primary section PA records the encryption- 

resultant contents information on the recording medium of the 
intermediate section R, or transmits the encryption-resultant 
contents information to the transmission line of the intermediate 
section R. 

2 0 The primary section PA outputs the key base information to 

the intermediate section R. Specifically, the primary section PA 
records the key base information on the recording medium of the 
intermediate section R, or transmits the key base information to the 
transmission line of the intermediate section R. 
2 5 The primary section PA may further include a second 

encryptor. In this case, the second encryptor encrypts at least part 
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of the key base information to generate encryption-resultant key 
base information. For example, the second encryptor encrypts at 
least the 16-bit contents provider ID information, the 16-bit 
contents author ID information, and the 4-bit maker ID information 
5 in the key base information. The second encryptor outputs the 
encryption-resultant key base information to the intermediate 
section R. Specifically, in this case, the primary section PA records 
the encryption-resultant key base information on the recording 
medium of the intermediate section R, or transmits the encryption- 
1 0 resultant key base information to the transmission line of the 
intermediate section R. 

The encryption-resultant contents information and the key 
base information (or the encryption-resultant key base information) 
are transmitted from the primary section PA to the secondary 

1 5 section QA through the intermediate section R. 

In the secondary section QA, the key processor 1 1 receives 
the primitive-key signal (the primitive-key information) from the 
calculator 5. In addition, the key processor 11 receives the 
authenticator- value information from the calculator 6. The key 

2 0 processor 1 1 decides whether or not the authenticator value 

represented by the information from the calculator 6 is correct. 
When the authenticator value is correct, the key processor 1 1 
passes the primitive-key signal to the decrypting device 8 as it is. 
When the authenticator value is not correct, the key processor 1 1 
2 5 alters or processes the primitive-key signal into a wrong primitive- 
key signal and outputs the wrong primitive -key signal to the 
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deciypting device 8. 

For example, the key processor 1 1 includes a memory, a 
comparator, and a signal converter. The memory stores data 
representative of a correct authenticator value. The memory 
5 informs the comparator of the correct authenticator value. The 
comparator receives the authenticator-value information from the 
calculator 6. The comparator decides whether the authenticator 
value represented by the information from the calculator 6 is equal 
to or different from the correct authenticator value. The 
1 0 comparator informs the signal converter of the result of the 
decision. The signal converter receives the primitive-key 
information from the calculator 5. The signal converter is followed 
by the decrypting device 8. When the result of the decision 
indicates that the authenticator value represented by the 

1 5 information from the calculator 6 is equal to the correct 

authenticator value, the signal converter falls into a through state. 
Thus, in this case, the signal converter passes the primitive-key 
information to the decrypting device 8 as it is. When the result of 
the decision indicates that the authenticator value represented by 

2 0 the information from the calculator 6 is different from the correct 

authenticator value, the signal converter falls into an active state. 
Thus, in this case, the signal converter alters or processes the 
primitive-key information into the wrong primitive-key signal and 
outputs the wrong primitive-key signal to the decrypting device 8. 
2 5 The decrypting device 8 receives the encryption-resultant 

contents information from the intermediate section R. The 
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deciypting device 8 uses the primitive-key signal as a signal 
(information) representative of a contents key. Operation of the 
decrypting device 8 is inverse with respect to that of the encryptor 
4 in the primary section PA. The decrypting device 8 decrypts the 
5 encryption-resultant contents information into the original contents 
information in response to the contents-key signal. Thus, the 
decrypting device 8 reproduces the original contents information. 
The decrypting device 8 outputs the reproduced contents 
information. 

1 0 In the system of Fig. 6, the correct contents-key signal can be 

fed to the decrypting device 8 only when the reproduced 
authenticator- value information is correct. The correct contents- 
key signal enables the decrypting device 8 to accurately reproduce 
the original contents information. On the other hand, a wrong 

1 5 contents-key signal is fed to the decrypting device 8 when the 

reproduced authentication-value information is wrong. The wrong 
contents-key signal makes it difficult for the decrypting device 8 to 
accurately reproduce the original contents information. 
Accordingly, the contents information can be surely prevented from 

2 0 being illegally reproduced or copied. 

The 16-bit contents provider ID information, the 16-bit 
contents author ID information, and the 4-bit maker ID information 
in the key base information may be replaced by at least one of 1) 
information about a region or regions corresponding to one or more 
2 5 countries, one or more zones, or one or more spaces, 2) information 
about identification of an individual, 3) information about 
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identification of a group of persons, 4) information about a rating, 5) 
information about identification of an apparatus maker or a device 
maker, 6) information about identification of a contents provider, 7) 
information about time, 8) information about contents authors, 9) 
5 information about identification of a reproducing apparatus or a 
reproducing device, 10) information about identification of a 
connection apparatus or a connection device, 11) information about 
identification of a medium on which contents information is 
recorded, 12) information about identification of contents 
1 0 information, and 13) information about accounting. 

Third Embodiment 
Fig. 7 shows a system for contents information according to a 
third embodiment of this invention. The system of Fig. 7 is similar 
to the system of Fig. 6 except for design changes mentioned 

1 5 hereinafter. The system of Fig. 7 includes a secondary section QB 

instead of the secondary section QA (see Fig. 6). 

The secondary section QB includes a decrypting device 8a 
instead of the decrypting device 8 (see Fig. 6). The decrypting 
device 8a is directly connected to the calculator 5. The secondary 

2 0 section QB includes a deciding device 12 connected between the 

calculator 6 and the decrypting device 8a. 

The deciding device 12 receives the authenticator-value 
information from the calculator 6. The deciding device 12 decides 
whether or not the authenticator-value information is correct, that 
2 5 is, whether or not the authenticator value represented by the 

information from the calculator 6 is correct. The deciding device 
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12 informs the decrypting device 8a of the result of the decision. 

For example, the deciding device 12 includes a memory and a 
comparator. The memory stores data representative of a correct 
authenticator value. The memory informs the comparator of the 
5 correct authenticator value. The comparator receives the 
authenticator-value information from the calculator 6. The 
comparator decides whether the authenticator value represented by 
the information from the calculator 6 is equal to or different from 
the correct authenticator value. The comparator is connected to 
1 0 the decrypting device 8a. The comparator informs the decrypting 
device 8a of the result of the decision. 

The decrypting device 8a receives the primitive-key signal 
from the calculator 5 as a signal (information) representative of a 
contents key. The decrypting device 8a receives the encryption- 

1 5 resultant contents information from the intermediate section R. 

The decrypting device 8a is selectively enabled and disabled in 
response to the decision result fed from the deciding device 12. 
When the decision result indicates that the authenticator-value 
information is correct, the decrypting device 8a is enabled. Thus, 

2 0 in this case, the decrypting device 8a decrypts the encryption- 

resultant contents information into the original contents 
information in response to the contents-key signal. In other words, 
the decrypting device 8a reproduces the original contents 
information. The decrypting device 8a outputs the reproduced 
2 5 contents information. When the decision result indicates that the 
authenticator-value information is not correct, the decrypting 
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device 8a is disabled. Thus, in this case, the decrypting device 8a 
fails to decrypt the encryption-resultant contents information. 
Accordingly, the contents information can be surely prevented from 
being illegally reproduced or copied. 
5 Fourth Embodiment 

Fig. 8 shows a system for contents information according to a 
fourth embodiment of this invention. The system of Fig. 8 is similar 
to the system of Fig. 1 except for design changes mentioned 
hereinafter. The system of Fig. 8 includes a primary section PC and 
1 0 a secondary section QC instead of the primary section P and the 
secondary section Q (see Fig. 1) respectively. 

The primary section PC is similar to the primary section P 
(see Fig. 1) except that an encryptor 20C is additionally provided. 
The encryptor 20C receives the key base information. The device 

1 5 20C encrypts at least part of the key base information to generate 

encryption-resultant key base information. For example, the device 
20C encrypts at least the 16-bit contents provider ID information, 
the 16-bit contents author ID information, and the 4-bit maker ID 
information in the key base information. The encryptor 20C outputs 

2 0 the encryption-resultant key base information to the intermediate 

section R. Specifically, in this case, the primary section PC records 
the encryption-resultant key base information on the recording 
medium of the intermediate section R, or transmits the encryption- 
resultant key base information to the transmission line of the 
2 5 intermediate section R. 

The encryption-resultant contents information and the 
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enciyption-resultant key base information are transmitted from the 
primary section PC to the secondary section QC through the 
intermediate section R. 

The secondary section QC is similar to the secondary section 
5 Q (see Fig. 1) except that a decrypting device 22C is additionally 
provided. The decrypting device 22C receives the encryption- 
resultant key base information from the intermediate section R. 
The decrypting device 22C decrypts the encryption-resultant key 
base information into the original key base information. The 
1 0 decrypting device 22C outputs the original key base information to 
the calculators 5 and 6. 

Fifth Embodiment 
Fig. 9 shows a system for contents information according to a 
fifth embodiment of this invention. The system of Fig. 9 is similar to 

1 5 the system of Fig. 6 except for design changes mentioned 

hereinafter. The system of Fig. 9 includes a primary section PD and 
a secondary section QD instead of the primary section PA and the 
secondary section QA (see Fig. 6) respectively. 

The primary section PD is similar to the primary section PA 

2 0 (see Fig. 6) except that an encryptor 20C is additionally provided. 

The encryptor 20C receives the key base information. The device 
20C encrypts at least part of the key base information to generate 
encryption-resultant key base information. For example, the device 
20C encrypts at least the 16-bit contents provider ID information, 
2 5 the 16-bit contents author ID information, and the 4-bit maker ID 

information in the key base information. The encryptor 20C outputs 
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the encryption-resultant key base information to the intermediate 
section R. Specifically, in this case, the primary section PD records 
the encryption-resultant key base information on the recording 
medium of the intermediate section R, or transmits the encryption- 
5 resultant key base information to the transmission line of the 
intermediate section R. 

The encryption-resultant contents information and the 
encryption-resultant key base information are transmitted from the 
primary section PD to the secondary section QD through the 
1 0 intermediate section R. 

The secondary section QD is similar to the secondary section 
QA (see Fig. 6) except that a decrypting device 22C is additionally 
provided. The decrypting device 22C receives the encryption- 
resultant key base information from the intermediate section R. 

1 5 The decrypting device 22C decrypts the encryption-resultant key 

base information into the original key base information. The 
decrypting device 22C outputs the original key base information to 
the calculators 5 and 6. 

Sixth Embodiment 
20 Fi g- 10 shows a system for contents information according to a 

sixth embodiment of this invention. The system of Fig. 10 is similar 
to the system of Fig. 7 except for design changes mentioned 
hereinafter. The system of Fig. 10 includes a primary section PE 
and a secondary section QE instead of the primary section PA and 

2 5 the secondary section QB (see Fig. 7) respectively. 

The primary section PE is similar to the primary section PA 
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(see Fig. 7) except that an encryptor 20C is additionally provided. 
The encryptor 20C receives the key base information. The device 
20C encrypts at least part of the key base information to generate 
encryption-resultant key base information. For example, the device 
5 20C encrypts at least the 16-bit contents provider ID information, 
the 16-bit contents author ID information, and the 4-bit maker ID 
information in the key base information. The encryptor 20C outputs 
the encryption-resultant key base information to the intermediate 
section R. Specifically, in this case, the primary section PE records 
1 0 the encryption-resultant key base information on the recording 

medium of the intermediate section R, or transmits the encryption- 
resultant key base information to the transmission line of the 
intermediate section R. 

The encryption-resultant contents information and the 

1 5 encryption-resultant key base information are transmitted from the 

primary section PE to the secondary section QE through the 
intermediate section R. 

The secondary section QE is similar to the secondary section 
QB (see Fig. 7) except that a decrypting device 22C is additionally 

2 0 provided. The decrypting device 22C receives the encryption- 

resultant key base information from the intermediate section R. 
The decrypting device 22C decrypts the encryption-resultant key 
base information into the original key base information. The 
decrypting device 22C outputs the original key base information to 
2 5 the calculators 5 and 6. 



